<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: cesarb</title><link>https://news.ycombinator.com/user?id=cesarb</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sun, 19 Apr 2026 12:40:51 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=cesarb" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by cesarb in "Why do Macs ask you to press random keys when connecting a new keyboard?"]]></title><description><![CDATA[
<p>> I assume HDMI has a USB channel?<p>No, it doesn't, it only has I2C (for display identification and control, same as VGA and DVI) and CEC (for remote control).</p>
]]></description><pubDate>Wed, 08 Apr 2026 23:35:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=47697556</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47697556</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47697556</guid></item><item><title><![CDATA[New comment by cesarb in "Why do Macs ask you to press random keys when connecting a new keyboard?"]]></title><description><![CDATA[
<p>> there's a fourth one which has an extra key on both the right and the left side of the keyboard. An example is the Brazilian Portuguese layout Model M (pic: ...)<p>That's the ABNT2 keyboard layout, which is the keyboard layout used here in Brazil. AFAIK, it's the only common keyboard layout with that characteristic.</p>
]]></description><pubDate>Wed, 08 Apr 2026 23:29:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47697510</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47697510</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47697510</guid></item><item><title><![CDATA[New comment by cesarb in "GLM-5.1: Towards Long-Horizon Tasks"]]></title><description><![CDATA[
<p>> Five minutes later, I check and it had found a /cancel.php URL that accepted an ID but the ID wasn't exposed anywhere, <i>so it found and was exploiting a blind SQL injection vulnerability</i> to find my reservation ID.<p>xkcd was prescient once again... <a href="https://xkcd.com/416/" rel="nofollow">https://xkcd.com/416/</a></p>
]]></description><pubDate>Wed, 08 Apr 2026 00:05:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=47682944</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47682944</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47682944</guid></item><item><title><![CDATA[New comment by cesarb in "The cult of vibe coding is dogfooding run amok"]]></title><description><![CDATA[
<p>> If it’s your own personal blog, then for sure no need to read the code,<p>I can off the top of my head think of at least three ways in which being careless with the code powering "your personal blog" could have real consequences. Suppose it has a bug which allows unauthenticated users to manage your pages, or even worse remote code execution. Then it could be used as a jumping-off point to attack other systems, for instance by turning it into a C&C server for some malware. It could be used in a "watering hole attack" against your readers. Or someone could edit the blog articles to make it appear that you said something you didn't.<p>"Not reading the code" is irresponsible for any software exposed to the global network.</p>
]]></description><pubDate>Tue, 07 Apr 2026 02:00:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=47669864</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47669864</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47669864</guid></item><item><title><![CDATA[New comment by cesarb in "Why Switzerland has 25 Gbit internet and America doesn't"]]></title><description><![CDATA[
<p>> Every home gets a dedicated 4-strand fiber line. Point-to-Point. Not shared. Not split 32 ways. [...] That dedicated fiber terminates in a neutral, open hub.<p>If you think about it, other than the "neutral, open" part, it's a return to the traditional phone model, where every home gets a dedicated point-to-point copper pair (or sometimes two pairs), which terminates in a hub (the telco central building) nearby, instead of being shared between several homes (though I've heard that, in the distant past, phone lines were also sometimes shared between households).</p>
]]></description><pubDate>Mon, 06 Apr 2026 12:32:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=47660077</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47660077</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47660077</guid></item><item><title><![CDATA[New comment by cesarb in "Building a Mostly IPv6 Only Home Network"]]></title><description><![CDATA[
<p>> IPv4 is pretty simple and good for LANs.<p>Until the place you're VPNing to happens to use the same RFC1918 network address as your LAN (that is, your LAN is 192.168.10.x and the network on the other side of your work's VPN is also 192.168.10.x). Or either of them use the same RFC1918 network address libvirt is using for its virtual network. Or you want to route between several LANs (for instance, after a company merger) and some of them (but not all) were using the same RFC1918 network addresses.<p>All of this is avoided by using public addresses for LANs, but address scarcity makes that hard with IPv4 (unless it's a legacy LAN from the 1900s which happens to still use public addresses form the pre-NAT era).</p>
]]></description><pubDate>Sun, 29 Mar 2026 17:08:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=47565001</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47565001</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47565001</guid></item><item><title><![CDATA[New comment by cesarb in "People inside Microsoft are fighting to drop mandatory Microsoft Account"]]></title><description><![CDATA[
<p>> all of those things have a single common denominator: Microsoft, over you, getting to decide what your computer is doing. [...] OS (and device) manufacturers have gotten it in their heads that it's OK for them to have a strong say in what your computer runs.<p>As I've said before (<a href="https://news.ycombinator.com/item?id=44923555">https://news.ycombinator.com/item?id=44923555</a>), in my opinion the starting point of this slide for Microsoft was WGA on Windows XP. It was the first time that they made the operating system treat the computer's administrator as hostile.</p>
]]></description><pubDate>Sat, 28 Mar 2026 01:53:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=47550745</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47550745</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47550745</guid></item><item><title><![CDATA[New comment by cesarb in "Apple discontinues the Mac Pro"]]></title><description><![CDATA[
<p>> By the time you want to upgrade a machine part (c. 5yr+ for modern machines), you'd want to upgrade every thing,<p>That's only the case for CPU/MB/RAM, because the interfaces are tightly coupled (you want to upgrade your CPU, but the new one uses an AM5 socket so you need to upgrade the motherboard, which only works with DDR5 so you need to upgrade your RAM). For other parts, a "Ship of Theseus" approach is often worth it: you don't need to replace your 2TB NVMe M.2 storage just because you wanted a faster CPU, you can keep the same GPU since it's all PCIe, and the SATA DVD drive you've carried over since the early 2000s still works the same.</p>
]]></description><pubDate>Fri, 27 Mar 2026 15:56:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=47544398</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47544398</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47544398</guid></item><item><title><![CDATA[New comment by cesarb in "Hold on to Your Hardware"]]></title><description><![CDATA[
<p>> How is this going to work? You need uncontrolled compute for developing software.<p>I've read about companies where all software developers have to RDP to the company's servers to develop software, either to save on costs (sharing a few powerful servers with plenty of RAM and CPU between several developers) or to protect against leaks (since the code and assets never leave the company's Citrix servers).</p>
]]></description><pubDate>Fri, 27 Mar 2026 13:10:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=47542253</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47542253</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47542253</guid></item><item><title><![CDATA[New comment by cesarb in "Microsoft's "fix" for Windows 11"]]></title><description><![CDATA[
<p>> Most people want a computer that works with their software. No, "learn the FOSS version" is not a solution.<p>Why is that argument always applied against Linux, and never against for instance macOS, which also can't run Windows software?</p>
]]></description><pubDate>Tue, 24 Mar 2026 15:05:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=47503743</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47503743</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47503743</guid></item><item><title><![CDATA[New comment by cesarb in "Cyberattack on vehicle breathalyzer company leaves drivers stranded in the US"]]></title><description><![CDATA[
<p>> Take away the car and people cannot live. [...] It is almost impossible to find a job and a house you can afford in walking distance of each other,<p>As a Brazilian, that statement feels bizarre. Yeah, my job and my home are not in walking distance of each other. I simply take the bus. Sure, some jobs are not within reach of the bus (or the ferry, or the metro, or the light tram, etc), and some jobs need a car (for instance, it would be hard for a HVAC technician to take all their equipment on a bus), but saying it's "almost impossible" to find a job?<p>> demanding there be things like grocery shopping as well make it not feasible for most people.<p>That also sounds bizarre to my ears. Most places I've known have small grocery shopping places on nearly every corner. You just have to walk.</p>
]]></description><pubDate>Mon, 23 Mar 2026 15:15:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=47490670</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47490670</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47490670</guid></item><item><title><![CDATA[New comment by cesarb in "Illinois Introducing Operating System Account Age Bill"]]></title><description><![CDATA[
<p>> It's set by the administrator of the computer, so a parent can set it for their child instead of hoping their child is honest to every single individual site.<p>You are assuming the parent is the administrator of the computer.</p>
]]></description><pubDate>Wed, 18 Mar 2026 00:49:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=47420368</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47420368</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47420368</guid></item><item><title><![CDATA[New comment by cesarb in "No leap second will be introduced at the end of June 2026"]]></title><description><![CDATA[
<p>> One 'answer' to this concern is to have a 'leap hour' or something in the future (some future generation's problem, not ours)<p>A simpler solution: we already have an offset between local time and coordinated time, just change that offset. So, for instance, Brasília Time, which is currently UTC-03, would become UTC-02 or UTC-04, depending on which way the change went.</p>
]]></description><pubDate>Tue, 10 Mar 2026 00:56:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=47317863</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47317863</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47317863</guid></item><item><title><![CDATA[New comment by cesarb in "Wikipedia was in read-only mode following mass admin account compromise"]]></title><description><![CDATA[
<p>> and see if, maybe just maybe, they can get by without js.<p>Unless it changed recently (it's too slow right now for me to check), Wikipedia has always worked perfectly fine without JS; that includes even editing articles (using the classic editor which shows the article markup directly, instead of the newer "visual" editor).<p>Edit: I just checked, and indeed I can still open the classic edit page even with JS blocked.</p>
]]></description><pubDate>Thu, 05 Mar 2026 23:33:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=47268732</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47268732</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47268732</guid></item><item><title><![CDATA[New comment by cesarb in "Wikipedia was in read-only mode following mass admin account compromise"]]></title><description><![CDATA[
<p>> For local users (the account in question wasn't local) you need to be an "interface admin", of which there are only 15 on english wikipedia.<p>It used to be all "admin" accounts, of which there were many more. Restricting it to "interface admin" only is a fairly recent change.</p>
]]></description><pubDate>Thu, 05 Mar 2026 23:14:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47268557</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47268557</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47268557</guid></item><item><title><![CDATA[New comment by cesarb in "Wikipedia was in read-only mode following mass admin account compromise"]]></title><description><![CDATA[
<p>> One of those random scripts was a 2 year old malicious script from ruwiki. This script injects itself in the global Javascript on every page, and then in the userscripts of any user that runs into it, so it started spreading and doing damage really fast.<p>So, like the Samy worm? (<a href="https://en.wikipedia.org/wiki/Samy_%28computer_worm%29" rel="nofollow">https://en.wikipedia.org/wiki/Samy_%28computer_worm%29</a>)</p>
]]></description><pubDate>Thu, 05 Mar 2026 22:51:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=47268360</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47268360</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47268360</guid></item><item><title><![CDATA[New comment by cesarb in "When AI writes the software, who verifies it?"]]></title><description><![CDATA[
<p>> Its difficult problem, because even if GitHub shows whole body of the updated method or a file, you still don't see grand picture.<p>> For example: A (calls) -> B -> C -> D<p>> And you made changes in D, how do you know the side effect on B, what if it broke A?<p>That's poor encapsulation. If the changes in D respect its contract, and C respects D's contract, your changes in D shouldn't affect C, much less B or A.</p>
]]></description><pubDate>Tue, 03 Mar 2026 22:51:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=47240228</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47240228</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47240228</guid></item><item><title><![CDATA[New comment by cesarb in "Museum of Plugs and Sockets"]]></title><description><![CDATA[
<p>> US style plugs and derivatives (and Australian, Japanese, Brazilian, etc)<p>Brazil no longer uses US style plugs (though you'll still find them in older installations), it nowadays uses a much safer EU-derived style.<p>> I find it insane that Brazil continues to be dual exclusive voltage; all of North America is dual concurrent voltage. Every home/office has 120v and 240v available. In Brazil it depends on what state/city you live in - some get 120v, some get 240v.<p>This is wrong; it's very common to have for instance both 127V and 220V in the same building, sometimes even side by side in the same wall faceplate; 127V is phase to neutral, 220V is phase to phase (on the common 3-phase system). Yes, it does depend on the city, some cities use 220V exclusively, and there are a few other variations, but AFAIK the 127V/220V 3-phase combo is the most common.<p>> Even worse they use the same standard plug design for both so you'd better hope the plug is the right color or has the right sticker. And you can't be sure you can take electrical appliances from one city to the next! At least they should have adopted different plugs for different voltages.<p>Yeah, at least it's better than the confusing mix of legacy sockets we had before (which already were mixed voltage - and yeah, we already used the "120V 5-15 NEMA plug" aka "computer plug" even for 220V).</p>
]]></description><pubDate>Fri, 27 Feb 2026 12:50:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=47179928</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47179928</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47179928</guid></item><item><title><![CDATA[New comment by cesarb in "Open Letter to Google on Mandatory Developer Registration for App Distribution"]]></title><description><![CDATA[
<p>> > Good luck with that.<p>> No luck needed. Linux based phones are starting to become viable as daily drivers.<p>Then please tell me, which non-Android Linux-based phone can I buy here in Brazil (one of the first places where Android would have these new restrictions)? I'd love to know (not sarcasm, I'm being sincere). Keep in mind that only phones with ANATEL certification can be imported, non-certified phones will be stopped by customs and sent back.</p>
]]></description><pubDate>Tue, 24 Feb 2026 19:43:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=47141790</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=47141790</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47141790</guid></item><item><title><![CDATA[New comment by cesarb in "LLMs as the new high level language"]]></title><description><![CDATA[
<p>> Also it is almost impossible to guarantee two runs of an application will trigger the same machine code output<p>As long as the JIT is working properly, it shouldn't matter: the code should always run "as if" it was being run on an interpreter. That is, the JIT is nothing more than a speed optimization; even if you disable the JIT, the result should still be the same.</p>
]]></description><pubDate>Sun, 08 Feb 2026 13:19:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=46933958</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=46933958</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46933958</guid></item></channel></rss>